Techniques for active inspection of cloud computing applications utilizing optical character recognition

1. A method for performing active inspection of a cloud computing environment utilizing optical character recognition, comprising:

receiving at least one network path to access a first resource, wherein the first resource is a cloud object deployed in the cloud computing environment, and potentially accessible from a network which is external to the cloud computing environment; and

generating a first instruction to access the first resource based on a plurality of reachability parameters designated in the at least one network path;

causing execution of the generated first instruction to access the first resource;

receiving a graphical output, the graphical output generated in response to execution of the generated first instruction;

performing optical character recognition (OCR) on the graphical output to generate a textual output;

detecting in the textual output a predetermined data indicator; and

initiating a second active inspection in response to detecting the data indicator in the textual output.

2. The method of claim 1 , further comprising:

parsing the textual output to a plurality of text elements;

comparing each text element to a predetermined text, the predetermined text indicating sensitive data; and

determining that a text element of the plurality of text elements is a sensitive data indicator in response to matching a text element to the predetermined text.

3. The method of claim 2 , further comprising:

matching the text element to the predetermined text based on determining a distance between the text element and the predetermined text utilizing a language processing technique.

4. The method of claim 2 , wherein the predetermined text is any one of: an identifier of an encryption protocol, an identifier of a key, an identifier of a certificate, an identifier of an account, and a combination thereof.

5. The method of claim 1 , further comprising:

parsing the textual output to a plurality of text elements;

determining a format of a text element of the plurality of text elements;

comparing the format of the text element to a predetermined format, the predetermined format indicating sensitive data; and

determining that the text element is a sensitive data indicator in response to matching the format to predetermined format.

6. The method of claim 5 , wherein the format includes any one of: a number of bits, a number of alphanumeric characters, and a combination thereof.

7. The method of claim 1 , further comprising:

receiving a second graphical output, the second graphical output generated in response to execution of the first instruction;

performing OCR on the second graphical output to generate a second textual output; and

determining that the data indicator indicates sensitive data in response to detecting data in the second textual output.

8. The method of claim 1 , further comprising:

generating an instruction to access the first resource utilizing login credentials, wherein the data indicator indicates an input.

9. The method of claim 1 , further comprising:

detecting in the graphical output a challenge-response test; and

generating a request to receive input based on the challenge-response test.

10. The method of claim 1 , further comprising:

generating a second instruction to access the first resource based on the plurality of reachability parameters and a predetermined data, wherein the predetermined data is selected based on the data indicator.

11. A system for performing active inspection of a cloud computing environment utilizing optical character recognition, comprising:

a processing circuitry; and

a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:

receive at least one network path to access a first resource, wherein the first resource is a cloud object deployed in the cloud computing environment, and potentially accessible from a network which is external to the cloud computing environment; and

generate a first instruction to access the first resource based on a plurality of reachability parameters designated in the at least one network path;

cause execution of the generated first instruction to access the first resource;

receive a graphical output, the graphical output generated in response to execution of the generated first instruction;

perform optical character recognition (OCR) on the graphical output to generate a textual output;

detect in the textual output a predetermined data indicator; and

initiate a second active inspection in response to detecting the data indicator in the textual output.

12. The system of claim 11 , wherein the memory contains further instructions which, when executed by the processing circuitry, further configure the system to:

parse the textual output to a plurality of text elements;

compare each text element to a predetermined text, the predetermined text indicating sensitive data; and

determine that a text element of the plurality of text elements is a sensitive data indicator in response to matching a text element to the predetermined text.

13. The system of claim 12 , wherein the memory contains further instructions which, when executed by the processing circuitry, further configure the system to:

match the text element to the predetermined text based on determining a distance between the text element and the predetermined text utilizing a language processing technique.

14. The system of claim 12 , wherein the predetermined text is any one of: an identifier of an encryption protocol, an identifier of a key, an identifier of a certificate, an identifier of an account, and a combination thereof.

15. The system of claim 11 , wherein the memory contains further instructions which, when executed by the processing circuitry, further configure the system to:

parse the textual output to a plurality of text elements;

determine a format of a text element of the plurality of text elements;

compare the format of the text element to a predetermined format, the predetermined format indicating sensitive data; and

determine that the text element is a sensitive data indicator in response to matching the format to predetermined format.

16. The system of claim 15 , wherein the format includes any one of: a number of bits, a number of alphanumeric characters, and a combination thereof.

17. The system of claim 11 , wherein the memory contains further instructions which, when executed by the processing circuitry, further configure the system to:

receive a second graphical output, the second graphical output generated in response to execution of the first instruction;

perform OCR on the second graphical output to generate a second textual output; and

determine that the data indicator indicates sensitive data in response to detecting data in the second textual output.

18. The system of claim 11 , wherein the memory contains further instructions which, when executed by the processing circuitry, further configure the system to:

generate an instruction to access the first resource utilizing login credentials, wherein the data indicator indicates an input.

19. The system of claim 11 , wherein the memory contains further instructions which, when executed by the processing circuitry, further configure the system to:

detect in the graphical output a challenge-response test; and

generate a request to receive input based on the challenge-response test.

20. The system of claim 11 , wherein the memory contains further instructions which, when executed by the processing circuitry, further configure the system to:

generate a second instruction to access the first resource based on the plurality of reachability parameters and a predetermined data, wherein the predetermined data is selected based on the data indicator.

21. A non-transitory computer readable medium having stored thereon instructions for causing a processing circuitry to execute a process, the process comprising:

receiving at least one network path to access a first resource, wherein the first resource is a cloud object deployed in the cloud computing environment, and potentially accessible from a network which is external to the cloud computing environment; and

generating a first instruction to access the first resource based on a plurality of reachability parameters designated in the at least one network path;

causing execution of the generated first instruction to access the first resource;

receiving a graphical output, the graphical output generated in response to execution of the generated first instruction;

performing optical character recognition (OCR) on the graphical output to generate a textual output;

detecting in the textual output a predetermined data indicator; and

initiating a second active inspection in response to detecting the data indicator in the textual output.